External demo file being loaded

External demo file being loaded

Posted by: brian.ploe on 26 November 2024, 12:41 pm EST

• 

  brian.ploe

  • Post Options:
  • Link
    Copy
  • Jump To Answer

  Posted 26 November 2024, 12:41 pm EST

  Several resource files such as gc.spread.sheets.designer.resource.cn.17.0.7.min.js are loading the following external URL automatically:

  https://demodata.grapecity.com/northwind/api/v1/Orders

  I’ll need to explain this to my security team, help?

• 

  brian.ploe

  • Post Options:
  • Link
    Copy

  Posted 26 November 2024, 5:19 pm EST

  I just downloaded the latest spreadjs and the script folder contains the resource files that have the demo data url still. This doesn’t appear to be coming from any demo project folder.

  What is the resource file used for? Do I need it?

• 

  priyam.kushwaha

  

  • Post Options:
  • Link
    Copy

  Posted 27 November 2024, 7:16 am EST

  Hi,

  I have reviewed the resource file “@grapecity/spread-sheets-designer-resources-cn,” and no API like https://demodata.grapecity.com/northwind/api/v1/Orders is being called. Please refer to the attached sample below ( see the network call of sample ):

  Sample: https://jscodemine.mescius.io/share/XxDCTqfmz0itpgOuv97sag/?defaultOpen={"OpenedFileName"%3A["%2Findex.html"%2C"%2Fpackage.json"]%2C"ActiveFile"%3A"%2Fpackage.json"}

  Regarding your question, “What is the resource file used for?”, the resource file is utilized to display content in a specific language. For instance, if you use “@grapecity/spread-sheets-designer-resources-cn,” the content will appear in Chinese.

  It is possible that the API https://demodata.grapecity.com/northwind/api/v1/Orders is being used elsewhere in your application, which is why it is being called. To assist you better, could you please share a minimal working sample along with steps to replicate the behavior? Alternatively, you can modify the attached sample to reproduce the issue. Additionally, sharing a GIF or video illustrating the issue would help us investigate more thoroughly.

  Regards,
  
  Priyam

• 

  brian.ploe

  • Post Options:
  • Link
    Copy

  Posted 27 November 2024, 12:14 pm EST

  I found the issue.
  
  While the production designer file does have a link to the demodata for some reason the problem in this case was that the dev used a demo template sjs file that happened to have a datasource attached to it for this same demodata url.
  
  Still not sure why the designer file has this url.

  Thank you for the reply and sorry for wasting your time!

• 

  priyam.kushwaha

  

  • Post Options:
  • Link
    Copy

  Posted 28 November 2024, 12:15 am EST

  Hi,

  Regarding “Still not sure why the designer file has this URL,”—if you are referring to why our demo includes this API call, it is solely for demonstration purposes for users.

  We’re glad your query has been resolved.

  Feel free to create a new ticket for any additional queries or issues.

  Regards,
  
  Priyam